New attack vectors in EKS
Summary
Wiz Research maps attacker tactics against new Amazon EKS features: a compromised IAM identity can enumerate clusters through Access Entries APIs and pivot between cloud and cluster.
- Published
- Collected
--- id: 7203 title: "New attack vectors in EKS" source_domain: wiz.io source_url: "https://www.wiz.io/blog/new-attack-vectors-emerge-via-recent-eks-access-entries-and-pod-identity-features" published_at: "2024-02-09T19:10:22Z" tags: ["cloud", "cloud-security", "aws", "kubernetes", "eks", "lateral-movement", "iam"] phying_url: "https://phying.com/item/7203" lang: en --- # New attack vectors in EKS ## Summary Wiz Research maps attacker tactics against new Amazon EKS features: a compromised IAM identity can enumerate clusters through Access Entries APIs and pivot between cloud and cluster. ## Intelligence Metadata - **Sources:** wiz.io - **Published:** 2024-02-09T19:10:22Z - **Original:** https://www.wiz.io/blog/new-attack-vectors-emerge-via-recent-eks-access-entries-and-pod-identity-features - **Phying News:** https://phying.com/item/7203